I am trying to build some modular documentation as a Splunk app on a site with a indexer- and search head cluster. Some of the reasoning behind this is that I spend quite some time r...
Hi, we have an IndexerCluster with a dedicated Cluster Manager. The indexers have an additional hard drive attached for the custom indexes. The cluster manager has only one hard disk. When a...
Hi, I just installed a indexclusterand i already know that i shoud place Apps to $SPLUNK_HOME/etc/master-apps/ directoty at my manager node to distribute it accross all indexers but i have 2 q...
...t with no success. In the details of the pending task, I can see that de bucket is only on one indexer, and not searchable on other indexers of the cluster. My SF = 2 and RF = 2. Id like to b...
Hi at all, I have to configure a multisite IndexerClusterand I have a dubt: in the Splunk architectig course, the indicated IndexerCluster replication port was 9100. Then reading Multisite Indexer...
...ractice, poor judgement, or as intended.
We have 8 main indexers that do what indexers do, all clustered as peer nodes.
The deployment server is the master node and the search head for the cluster (w...
When one configures the indexercluster for SmartStore, does each indexer get its own S3 bucket? Or is there just one very large S3 bucket and all indexers write into the same S3 bucket (s...
Hello, Just have a question, about a test that I have in progress. I have one indexercluster, with two servers. I decided to move, the colddb path, on a san share, mounted on both indexers....
Hi, we have a two site 6 indexercluster 3 per site and we are upgrading the CPU and each site will be offline for 3 hours per site, do I need to do anything on Splunk or do I need to run ....
My current Splunk infra setup is clustered for Search Heads andIndexers. and we are using deployer andcluster master to manage configs for the respective SH and IDX. For example, can I m...